The US FCC has added foreign-made consumer routers to its national security Covered List, effectively barring new approvals for such devices. The ruling cites unacceptable national security risks and calls for 'trusted supply chains', implying a need for US-manufactured routers — which don't currently exist at consumer scale. The author is skeptical, noting the supporting evidence focuses only on firmware vulnerabilities and that the real-world security threat from hardware backdoors is overstated compared to the far more common risk of sloppy input validation and software CVEs. Previously approved routers can still be sold. The author suggests better alternatives include strict independent audits and good network hygiene, and notes that DIY router solutions using open-source software remain viable.
Sort: